Devoteam Cyber Trust | SOC Analyst | Banking Sector

<p>We are currently looking for a SOC Analyst for a project in the Banking area.</p><ul><li>Be operational on the security tools used in the client and master the architectures in place.</li><li>Solid knowledge in most of the following technical areas is required, keeping in mind that no one is an expert in every topic.</li><li>Have advanced problem-solving skills and a background in cybersecurity engineering.</li></ul><p>The candidate will play a key role in threat analysis, incident response, and knowledge transfer within the Security Operations Center (SOC), acting as a reference point for technical expertise and incident investigation.</p><p>&nbsp;</p><ol><li><p><strong>Analysis</strong></p></li></ol><ul><li><p>Improve and optimize correlation and log analysis rules using Splunk.</p></li><li><p>Investigate alerts across various Tactics, Techniques, and Procedures (TTPs).</p></li><li><p>Prioritize incidents, conduct compromise assessments, and implement blocking actions.</p></li><li><p>Perform first-level scans of malicious code using sandbox or manual analysis.</p></li></ul><ol><li><p><strong>Incident Response</strong></p></li></ol><ul><li><p>Communicate and escalate confirmed incidents to senior management.</p></li><li><p>Lead technical investigations during incidents, supporting junior SOC analysts.</p></li><li><p>Conduct retro-hunting, qualifying and analyzing findings to determine cause, attack methodology, exploited vulnerabilities, and scope of compromise.</p></li></ul><ol><li><p><strong>Knowledge Transfer</strong></p></li></ol><ul><li><p>Document investigation processes, findings, and best practices.</p></li><li><p>Provide training and mentoring to less experienced SOC analysts.</p></li></ul>

<ul><li>&gt; 5 years of experience as a SOC Analyst</li><li>Knowledge of the operating principles of Information Monitoring and Security Event Solutions (SIEM).</li><li>Good experience of Splunk and Regex search syntax.</li><li>Good experience of the Hive</li><li>Good knowledge of network and system architectures</li><li>Knowledge of the operation of intrusion detection probes and event log correlation tools</li><li>Good knowledge of Mitre Attack framework and counter measures link to the technics and tactics</li><li>Good knowledge of Information monitoring and analysis tools and methods.</li><li>Good knowledge of the security standards for different technologies (web servers, messaging, database, DNS, proxy, firewall, etc.)</li><li>Web application vulnerabilities</li><li>Malware types (rootkit, ransomware, botnet, etc.)</li><li>Obfuscation and persistence technics (cryptography, packing, etc.).</li><li>Digital investigation/analysis tools</li><li>SandBox behavioral</li><li>Good level of English</li></ul>